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Top Stories 

• Three former General Electric Co. bankers were convicted May 1 1 of defrauding cities and 
the U.S. Internal Revenue Service in a bid-rigging scheme involving hundreds of millions 
of dollars in municipal bonds. - Bloomberg (See item 10 ) 

• Police arrested three high school students accused of setting a massive fire that destroyed 
part of a high school in Woodburn, Oregon. - Associated Press (See item 38) 

• DHS issued a bulletin May 10 warning about a previously undisclosed, critical 
vulnerability in Movicon 11, software used to manage machines used in the manufacturing, 
energy, and water sectors. - Threatpost (See item 52) 

• Sheriffs detectives in Fresno County, California, arrested a man they believe is responsible 
for stealing miles of phone wire that caused phone service to cut out for many customers. - 
KSFN 30 Fresno (See item 54) 

• Authorities were trying to trace the source of a food-bome outbreak that sickened up to 150 
people who attended a party and food fair at a Buddhist monastery in Carmel, New York. - 
Melville Newsday (See item 56) 

• Seven businesses in downtown Mariposa, California, burned to the ground the weekend of 
May 12 in a fire that caused about $1 million in structural damage. - Bellingham Herald 
(See item 60 ) 

• Firefighters battled several wildfires in Arizona, May 14, including one that was human- 
caused, more than 4.5 square miles in size, and forced residents from their homes. - 
Associated Press (See item 61 ) 
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Energy Sector 



Current Electricity Sector Threat Alert Levels: Physical: LOW, Cyber: LOW 

Scale: LOW, GUARDED, E L EVATED, HIGH, SEVERE [Source: ISAC for the Electricity Sector (ES-ISAC) - 
[http://www.esisac.coml 



1. May 13, Wyoming Tribune-Eagle - (Wyoming) Wyo. fire departments battle oil well 
fire. A fire with flames 100 to 200 feet high erupted May 11 at an oil well east of 
Cheyenne, Wyoming, owned by SM Energy. The fire started in an oil treater containing 
20 to 250 gallons of an oil and water mixture, a Laramie County Fire District 2 
spokesman said. The treater overflowed and was ignited. About 60 firefighters 
responded to the scene from several agencies, including 6 Laramie County fire districts, 
the Torrington Fire Department, and F.E. Warren Air Force Base. Firefighters from the 
local Frontier Oil refinery also helped. The fire was extinguished in about an hour. 
Source: http://www.firerescuel.com/fire-attack/articles/1286166-Wyo-fire- 
departments-battle-oil- well-fire/ 

2. May 11, Associated Press - (Wyoming) Wyo. oil refinery where 3 hurt was cited 
recently. State regulators recently issued three safety citations, including fire 
prevention and fire equipment maintenance violations, against the Sinclair oil refinery 
in Cheyenne, Wyoming, where a flash fire the week of May 7 injured four workers. 
Two fires occurred at the refinery while a routine safety inspection was being 
conducted in 2011, a compliance supervisor with the State Occupational Safety and 
Health Administration said May 11. The three citations issued in March listed serious 
violations with paperwork, maintenance, training, and fire prevention. The State 
proposed more than $45,000 in fines, which Sinclair can appeal and negotiate. The 
citations resulted from inspections of preventive maintenance operations and 
procedures at the refinery. 

Source: http://www.cbsnews.com/8301-505244 162-57433027/wyo-oil-refinery- 
where-3-hurt-was-cited-recently/ 
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3. May 10, Walnut Creek Patch - (California) Failed switch blamed for May 1 power 
outage. A failed switch in a Pacific Gas and Electric (PG&E) substation was the cause 
of a power outage the week of April 30 that affected 29,000 homes and businesses in 
Walnut Creek, California. A PG&E spokeswoman said the switch failed May 1 in the 
utility’s substation near Walnut Creek Intermediate School. She said since the switch 
was in a substation, the power outage was more widespread than if there had been a 
problem elsewhere on the utility’s system. Power was routed around the switch and 
electricity was restored about an hour after the blackout. The switch has since been 
replaced. 

Source: http://walnutcreek.patch.com/articles/failed-switch-blamed-for-last-week-s- 
power-outage 

For another story, see item 52 



T Return to top i 

Chemical Industry Sector 

4. May 12, Associated Press - (Utah; International) Man pleads guilty to stealing 
company’s formulas. A scientist accused of stealing secret formulas from a Utah 
chemistry company pleaded guilty to a federal computer charge May 1 1. He entered the 
plea in U.S. District Court to one count of unlawful access to a protected computer, in 
exchange for prosecutors dropping 25 other charges against him. He had worked for 
North Logan-based Frontier Scientific Inc. from 2009 to 2011. He admitted to 
accessing a company chemical resource notebook and emailing the formula for meso- 
Tetraphenylporphine, or TPP, to his brother-in-law in India. Investigators say that 
relative was setting up a competing company to undercut Frontier Scientific on prices it 
charges for pharmaceutical chemicals. Frontier Chemical, which supplies chemicals for 
research and drug discovery, says no other company in the world produces TPP in such 
large quantities. 

Source: http://www.foxnews.com/us/2012/05/12/man-accused-taking-trade-secrets- 
pleads-guilty/ 

For more stories, see items 5 and 19 
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Nuclear Reactors, Materials and Waste Sector 

5. May 14, Associated Press - (South Carolina) Regulators question Columbia nuke 
factory safety. Federal regulators said a Columbia, South Carolina plant that makes 
nuclear reactor fuel has not followed through on safety recommendations made 9 years 
ago, the Associated Press reported May 14. The State newspaper in Columbia said the 
recommendations would have further reduced the chances the Westinghouse Electric 
Co. plant southeast of downtown Columbia could suffer a radiation leak in an 
earthquake. Westinghouse officials said they are working on some of the suggestions. 
They would not specify the recommendations but said some involved removing 
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potentially hazardous chemicals. The U.S. Nuclear Regulatory Commission said walls 
could collapse and equipment topple in a severe earthquake. The chances of that kind 
of quake are rare, and workers would probably be the only people exposed to radiation, 
but regulators are more cautious after the disaster at a Japanese nuclear plant in 2011. 
Source: http://www.carolinalive.com/news/story.aspx?id=753497#.T7EeElKlWHt 

6. May 12, Associated Press - (Michigan) Michigan Palisades nuke plant returned to 
service. The Palisades nuclear plant in Van Buren County, Michigan, returned to 
service May 12 after a break of little more than a month for refueling and maintenance. 
The 41 -year-old plant has been under Nuclear Regulatory Commission (NRC) scrutiny 
because of a series of safety problems in recent months. The NRC classifies Palisades 
as 1 of the 4 worst performers of the 104 nuclear plants it regulates. The commission 
said that in one case, an electrical fault caused by plant workers made the reactor and 
half of the control room indicators shut down and triggered safety systems that actual 
plant conditions did not justify. In another instance, a water pump that cools safety 
equipment failed, the result of a crack in one of the couplings that hold together rods in 
the cooling system. 

Source: http://www.vcstar.com/news/2012/mav/12/sw-mich-palisades-nuke-plant- 
returned-to- service/ 

[ Return to top ] 

Critical Manufacturing Sector 

See item 52 
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Defense Industrial Base Sector 



See item 52 
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Banking and Finance Sector 

7. May 14, Krebs on Security - (National) Global Payments Breach fueled prepaid 
card fraud. Debit card accounts stolen in a recent hacker break-in at card processor 
Global Payments were showing up in fraud incidents at retailers in Las Vegas and 
elsewhere, according to officials from one bank impacted by the fraud. At the 
beginning of March, Danbury, Connecticut-based Union Savings Bank (USB) began 
seeing an unusual pattern of fraud on a dozen or so debit cards it had issued. When the 
bank determined the facility where the purchases took place was a customer of Global 
Payments, it contacted Visa to alert the card association of a possible breach, according 
to USB’s chief risk officer. That is when USB heard from a fraud investigator at Vons, 
a grocery chain in southern California and Nevada. According to the chief risk officer, 
the investigator said the fraudsters were coming to the stores to buy low-denomination 
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prepaid cards, and then encoding debit card accounts issued by USB onto them. The 
thieves then used those cards to purchase additional prepaid cards with much higher 
values. The risk officer said Visa alerted USB that about 1,000 debit accounts it issued 
were compromised in the Global Payments breach — including the dozen or so card 
accounts that initially prompted USB to investigate. USB officials said the bank 
suffered about $75,000 in fraudulent charges, and that it has so far spent close to 
$10,000 reissuing customer cards. 

Source: http://krebsonsecuritv.com/2012/05/global-payments-breach-fueled-prepaid- 
card-fraud/ 



8. May 14, WMC 5 Memphis - (Tennessee) 1,000 phony money orders land women in 
jail. Narcotics officers were called to investigate a suspicious package at a FedEx 
facility in Cordova, Tennessee, the week of May 7, but investigators did not find drugs 
when they opened the package. Instead, deputies with the Shelby County Sheriffs 
Office Narcotics Unit found almost 1,000 counterfeit U.S. Postal Service money orders 
in the package. Each money order was written for $870, for a total of more than 
$835,000. Investigators delivered the package to a home and arrested the woman who 
accepted the package. However, she was not the woman who the package was 
addressed to, but she agreed to arrange for another woman to pick up the counterfeit 
money orders. Shortly after she picked up the package, the second woman was arrested 
during a traffic stop. Deputies said they also found stolen mail, credit cards, and state 
ID’s inside the house. Both women have been charged with criminal simulation, 
identity theft, and forgery. 

Source: http://cordova.wmctv.com/news/news/74851-1000-phony-money-orders-land- 
women-jail 

9. May 14, U.S. Securities and Exchange Commission - (National) SEC microcap fraud- 
fighting initiative expels 379 dormant shell companies to protect investors from 
potential scams. The U.S. Securities and Exchange Commission (SEC) May 14 
suspended trading in the securities of 379 dormant companies before they could be 
hijacked by fraudsters and used to harm investors through reverse mergers or pump- 
and-dump schemes. The trading suspension marks the most companies ever suspended 
in a single day by the agency as it ramps up its crackdown against fraud involving 
microcap shell companies that are dormant and delinquent in public disclosures. An 
initiative tabbed Operation Shell-Expel by the SEC’s Microcap Fraud Working Group 
used various agency resources, including the enhanced intelligence technology of the 
Enforcement Division’s Office of Market Intelligence to scrutinize microcap stocks in 
markets nationwide and identify clearly dormant shell companies in 32 states and 6 
foreign countries that were ripe for fraud. The existence of empty shell companies can 
be a financial boon to stock manipulators who will pay as much as $750,000 to assume 
control of the firm to pump and dump the stock for illegal proceeds to the detriment of 
investors. 

Source: http ://www . sec . gov/news/press/20 1 2/20 12-91 .htm 

10. May 12, Bloomberg - (National) Ex-GE bankers convicted of municipal bond bid- 
rig scheme. Three former General Electric Co. (GE) bankers were convicted of 
defrauding cities and the U.S. Internal Revenue Service in a bid-rigging scheme 
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involving municipal bonds. The three were found guilty by a federal jury in New York 
City May 1 1 of conspiracy to commit fraud by manipulating auctions for municipal 
bond investment contracts. The government claimed from August 1999 to November 
2006 the men gave kickbacks to brokers hired by local governments to solicit bids, to 
win auctions, and to increase profits. The charges grew out of a 5-year investigation by 
federal antitrust prosecutors into the $3.7 trillion municipal bond market. In December 
2011, GE agreed to pay $70.4 million to resolve its part of the investigation. Bank of 
America Corp., JPMorgan Chase & Co., UBS AG, and Wells Fargo & Co. 
acknowledged illegal activities by former employees and paid more than $670 million 
in restitution and penalties. The jury convicted the defendants of all the counts they 
faced, of conspiracy to commit wire fraud and to defraud the United States. The case 
against the three former GE bankers focused on guaranteed investment contracts, which 
cities buy with money raised from selling bonds. This allows cities to earn money on 
the funds until they are used for projects such as nursing homes, hospitals, and roads. A 
former CDR Financial Products Inc. employee who pleaded guilty and is cooperating 
with the government, testified about helping GE win bids in exchange for later fees on 
swap transactions. 

Source: http://www.businessweek.com/news/2012-05-ll/ex-ge-bankers-convicted-of- 
municipal-bond-bid-rig-scheme 

11. May 11, Orange County Register - (California) Police: ‘Plaid’ bandit leaves bank on 
skateboard with no money. Police seek a serial bank robber believed to have 
skateboarded from the scene of an unsuccessful holdup in Orange County, California, 
May 11. Officers responded to reports of an attempted bank robbery at a Wells Fargo 
branch, a police lieutenant said. A man handed an employee a demand note, he said, 
and then fled when the teller ducked behind a counter. No money was stolen. The 
would-be robber was last seen fleeing the bank on a skateboard. Authorities believe he 
is the “Gone Plaid Bandit,” who is responsible for seven previous bank robberies in 
Orange County, including holdups in Yorba Linda, Irvine, Anaheim Hills, and Mission 
Viejo. The “Gone Plaid Bandit,” who earned his nickname by wearing plaid during 
some of the robberies, used notes during the previous incidents, although he was seen 
armed with a knife during at least one Irvine robbery and once claimed to have been 
armed with a gun. 

Source: http://www.ocregister.com/news/bank-353879-plaid-robbery.html 

12. May 11, Associated Press - (Illinois; National) Money manager pleads guilty to 
investment scam. A former investments manager pleaded guilty to pulling a 
multimillion-dollar Ponzi scheme that hurt more than 300 victims across the country. 
The Illinois attorney general announced May 1 1 the former manager was ordered to 
pay more than $10 million in restitution to victims. Prosecutors said he bilked investors 
by promising that a software program he developed could get them 20 percent returns. 
He then paid clients using money from new clients. 

Source: http://www.cbsnews.com/8301-505245 162-57432907/money-manager- 
pleads-guiltv-to-investment-scam/ 

13. May 11, Ars Technica - (International) Bitcoins worth $87,000 plundered in brazen 
server breach. More than $87,000 worth of the virtual currency known as Bitcoin 
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(BTC) was stolen after online bandits penetrated servers belonging to Bitcoinica, 
prompting its operators to temporarily shutter the trading platform to contain the 
damage. The May 1 1 theft came after hackers accessed Bitcoinica’s production servers 
and depleted its online wallet of 18,547 BTC, company officials said in a blog post. It 
said the heist affected only a small fraction of Bitcoinica’s overall bitcoin deposits and 
that all withdrawal requests will be honored once the platform reopens. It was at least 
the second time in 10 weeks Bitcoinica has been stung by a computer intrusion. The 
post went on to warn that a database storing user names, e-mail addresses, and account 
histories was also accessed, and it also suggested cryptographically hashed passwords 
may have been compromised. It advised customers who reused their Bitcoinica 
passwords on other sites to change them. Documents used to legally verify users’ 
identities are stored on separate servers at a separate data center with a different 
encryption regimen. According to comments left by Bitcoin’ s chief executive in an 
online forum, hackers penetrated a Web server hosted by Rackspace after they 
managed to reset a password, most likely through an automated e-mail. 

Source: http://arstechnica.com/uncategorized/2012/05/bitcoins-worth-87000-plundered/ 

For another story, see item 46 
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Transportation Sector 

14. May 14, WTVJ 6 Miami - (Florida) MIA people mover train out of order 
Monday. The people mover train at Miami International Airport (MIA) was out of 
operation May 14, a day after it derailed. An MIA spokesman said he hoped the train 
would be back up and running later in the day. He said 12 people were on board at the 
time, and 2 suffered minor injuries and were treated at the scene. Shuttle buses were 
brought in to help move passengers and get people on the ground to their planes. It was 
the first such incident on the trains since they went into operation in September 2011. 
Source: http://www.nbcmiami.com/news/MIA-People-Mover-Train-Qut-of-Order- 
Monday-151358105.html 

15. May 14, WTNH 8 New Haven - (Connecticut) More than 20 injured in bus 
accident. At least 22 people were injured in East Haven, Connecticut, May 14, and 5 
were hospitalized after a Connecticut Transit (CT Transit) city bus was rear-ended by a 
truck on Frontage Road. The bus was stopped and a passenger was loading his bicycle 
onto the rack in front when the bus was hit from behind by a large red service truck 
carrying kitchen grease. CT Transit officials said there were 29 people on the bus that 
was headed to New Haven. At least four of the injuries were serious. The driver of the 
truck was among those taken to the hospital. Several ambulances, along with fire 
department and police were on the scene within minutes of the crash. The truck then 
caught fire. One lane of Frontage Road was closed while crews were on the scene. 
Source: http://www.ctpost.com/news/article/More-than-20-injured-in-bus-accident- 
3556637.php 
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16. May 14, NewsCore - (Maryland) Discarded pepper spray temporarily shuts down 
Baltimore airport concourses. Two concourses at Baltimore- Washington 
International Thurgood Marshall Airport (BWI) in Baltimore were temporarily shut 
down May 14 after an unusual, irritating odor was reported. Investigators determined 
the source of the odor was apparently a discarded can of pepper spray. Concourses A 
and B at BWI were shut down for about 90 minutes after the smell was reported in 
Concourse B. Employees and passengers were evacuated as a precaution. Southwest 
Airlines and Air Tran delayed flights while officials investigated. Officials believe a 
passenger may have thrown the aerosol can away before going through a security 
checkpoint. 

Source: http://www.mvfoxdfw.corn/storv/18375001/discarded-pepper-sprav- 
temporarily-shuts-down-baltimore-airport-concourses 

17. May 14, WMAQ 5 Chicago - (Illinois) Police investigate suspicious bag found on 
Metra. Harvard, Illinois police investigated a “suspicious” bag recovered from an 
empty Metra car that delayed a Chicago-bound train 3.5 hours May 11. “It raised the 
suspicions in terms of the nature of the package, and with it being as close to NATO 
[North Atlantic Treaty Organization] Summit, you have got to take everything 
seriously,” said a Harvard police deputy chief. A Metra spokeswoman said Union 
Pacific Northwest Line train No. 662 was supposed to depart, but was stopped as 
Harvard police investigated the package. After delaying the Metra train, police found 
the contents of the bag to be nothing of concern. 

Source: http://www.nbcchicago.com/news/local/Suspicious-Package-Found-on- 
Chicago-bound-Metra-Havard- 151235935 .html 

18. May 13, Denver Post - (Colorado) Truck rolls over car and bursts into flames on I- 
70 near Vail. One person is dead and three others were injured after a truck rolled off 
an Interstate 70 overpass at Avon, Colorado, and dropped onto a vehicle on the street 
below May 13. The accident led to the closing of 1-70 in both directions for several 
hours. The Vail Daily reported the truck driver survived, but a passenger in the truck 
died. The fire raged for 20 to 30 minutes. The Colorado Department of Transportation 
(DOT) initially reopened eastbound lanes, but westbound 1-70 remained closed at Avon 
Road. “We are keeping the bridge closed right now, all the damage is in the westbound 
lane. There is some guard rail damage and we are not sure whether heat from the 
explosion caused damage to the bridge,” said a Colorado Department of Transportation 
spokeswoman. The department sent a bridge inspector from Denver to inspect the 
bridge, and DOT engineers were also at the scene. 

Source: http://www.denverpost.com/breakingnews/ci 20615260/truck-rolls-over-i-70- 
closing-highway-west 

19. May 12, Lincoln Journal Star - (Nebraska) Some Nebraska 2 lanes reopened after 
chemical spill. A small crash involving a pair of large trucks resulted in a large leak of 
chemicals and led authorities to stop traffic on a stretch of Nebraska 2 near Lincoln, 
Nebraska, for several hours May 12. The Lincoln Fire and Rescue battalion chief said a 
semitrailer hit the back of a flatbed truck east of South 27th Street, causing 1 of 16 250- 
gallon tanks inside the semi to rupture. Boiler cleaner leaked from the tank onto the 
roadway. A hazardous materials team set up a perimeter that included the Rock Island 
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Trail bridge, which crosses the highway directly above the spill site. The chief said the 
possibility of dangerous vapors was a concern. The westbound lanes of Nebraska 2 
were expected to stay closed for hours as crews worked to clean the chemical and 
remove the truck. Eastbound lanes were reopened within about an hour. Westbound 
lanes had not been reopened more than 6 hours after the crash. Boiler cleaner can be 
washed away with water, the chief said, but the Southern Refrigerated Transport Inc. 
semitrailer would need to be unloaded before being moved. He said the 
Lincoln/Lancaster County Health Department hired an outside contractor to clean the 
spill and the cleanup process would be complete by the night of May 12. He said fire 
officials were overseeing the cleanup. 

Source: http://ioumalstar.com/news/local/some-nebraska-lanes-reopened-after- 
chemical-spill/article 667dal77-d4al-5el5-abf2-a6b64b6619d0.html 

20. May 11, Associated Press - (Washington) Copper cable worth $250K stolen from 
rail tunnel. Sound Transit officials in Washington State said someone stole about 
70,000 pounds of valuable copper cable from a tunnel inside the elevated light rail track 
between SeaTac and Seattle. A transit agency spokesperson said May 11 that the 
missing cable poses no danger to trains or passengers. He said the cable protects the 
structure from any stray currents. 

Source: 

http://seattletimes.nwsource.com/html/localnews/2018192463 apwacoppertheft.html 

For more stories, see items 41, 60, 61, and 62 
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Postal and Shipping Sector 

21. May 14, WH10 7 Dayton - (Ohio) Homemade bombs found in Vandalia. Firefighters 
were investigating after six homemade bombs were found in a Vandalia, Ohio 
neighborhood over the last 2 days. Emergency crews responded May 14 after getting a 
report that someone’s mailbox was blown up overnight, according to reports. Police 
said a homemade bomb was used to blow up the mailbox. Three of the homemade 
bombs were found at the home, in addition to three others that were found in the 
neighborhood May 13. The material inside the bomb can cause serious injuries, 
including bums and blindness. All six of the homemade bombs discovered were 
detonated. 

Source: http://www.whiotv.com/news/news/local/homemade-bombs-found-vandalia- 
neighborhood/nN5Rx/ 

22. May 11, WSHM 3 Springfield - (Massachusetts; Connecticut) Mysterious powder 
found in envelope deemed harmless. The mysterious white powder that forced some 
Springfield, Massachusetts residents out of their homes was deemed harmless, WSHM 
3 Springfield reported May 11. The HAZMAT team was called to Shaine Circle after a 
resident found two envelopes that had been dropped through his mail slot. When he 
opened one up, he found the white power that was determined to be acetaminophen. 
Four other similar incidents have happened in Massachusetts and Connecticut. Officials 
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with the DHS were also dispatched to the scene. 

Source: http://www.cbs3springfield.com/storv/18308398/mvsterious-powder-found-in- 
envelope-deemed-harmless 

23. May 11, Associated Press - (National; International) US Postal Service will not ship 
electronics with lithium batteries abroad, citing safety risks. The U S. Postal 
Service is banning international shipments of electronics with lithium batteries such as 
smartphones, laptops, and iPads, citing the risk of fire. Beginning May 16, consumers 
may no longer make the shipments, including to army and diplomatic post offices. That 
means friends and family will have to use more expensive private companies such as 
UPS and FedEx to ship electronics to U.S. troops based abroad. The Postal Service 
cited discussion by the International Civil Aviation Organization and the Universal 
Postal Union. They issue semi-binding guidelines for global trade. Officials expect that 
U.S. consumers can resume shipments in most cases after January 1, 2013, once the 
agency develops a new policy “consistent with international standards.” Lithium 
batteries are believed to have caused at least two fires on cargo planes since 2006. 
Source: http://www.washingtonpost.com/politics/us-postal-service-will-not-ship- 
electronics-with-lithium-batteries-abroad-citing-safety- 
risks/20 12/05/1 1/gIQAgCsaIU story.html 
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Agriculture and Food Sector 

24. May 14, WHTM 27 Harrisburg - (Pennsylvania) Police investigating another trailer 
theft. Pennsylvania State Police said they were looking for another trailer that was 
stolen from a midstate distribution center, WHTM 27 Harrisburg reported May 14. The 
latest stolen trailer was full of baked goods. Troopers said the semi-trailer was taken 
from the Food Lion distribution center near Greencastle in Franklin County sometime 
between May 3 and 4. The trailer was carrying perishable baked goods, including 
several varieties of cakes, fillings, and frostings. State police estimate the total value of 
the stolen goods at $41,000. Earlier in May, two trailers filled with $30,000 worth of 
Corona beer were stolen from a Cumberland County distribution center. 

Source: http://www.abc27.com/story/18371282/police-investigating-another-trailer- 
theft 



25. May 13, Associated Press - (Hawaii) State health officials find pesticide not 
approved for use on basil at 4 other Oahu farms. State Department of Health 
officials found other Oahu, Hawaii farms using unapproved pesticides on basil crops, 
the Associated Press reported May 13. State and federal authorities were working with 
local farmers to prevent pesticide misuse after samples at a west Oahu farm in April 
tested positive for a pesticide not approved by the U.S. Environmental Protection 
Agency for use on basil. The farm was ordered to stop selling basil and destroy affected 
crops. Health officials said 10 basil samples from 5 produce distributors on the island 
were tested. Testing found 7 out of 10 samples were positive for 1 or more pesticides 
not approved for basil. Basil samples taken from six Oahu farms found four farms 
tested positive for at least one unapproved pesticide. All contaminated crops were 
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restricted from sale or distribution. 

Source: 

http://www.therepublic.com/view/storv/d862d9e580b74ab897db87a8fb7cd023/HI— 
Pesticide- Violation-Basil/ 



26. May 13, KOMO 4 Seattle - (Washington) Famed shellfish in jeopardy after boat 
fire, sinking. Mussel harvesting was suspended until further notice in Whidbey 
Island’s Penn Cove in Washington State after a 128-foot derelict fishing vessel 
anchored there burst into flames and later sank, officials said. The fishing boat Deep 
Sea caught fire May 12 and continued burning into May 13, the U.S. Coast Guard 
reported. It sank May 13 as the Coast Guard was preparing to inspect it and see if it 
could be towed out of Penn Cove, which is known around the world for the quality of 
its mussels and shellfish. An official with the State Department of Ecology said the 
mussel farm operations were suspended as a precaution while investigators make 
certain no pollution reached the mussel pens from the vessel. The investigation was 
being conducted by the State Health Department, he said. 

Source: http://www.seattlepi.com/local/komo/article/Farned-shellfish-in-ieopardv-after- 
boat-fire-3555376.php 

27. May 12, Associated Press - (Colorado) Fire that killed half a million chickens at egg 
farm near Roggen ruled an accident. Authorities said a fire that killed half a million 
chickens at an egg farm near Roggen, Colorado, was an accident, the Associated Press 
reported May 12. The Greeley Tribune reported the Weld County Sheriffs Office 
determined the April 30 fire was accidental. The company plans to rebuild the three 
structures that were destroyed in the fire. The chickens that died in the fire collectively 
produced about 250,000 eggs per day. 

Source: 

http://www.therepublic.com/view/storv/7bl51c7075a043a88bcfcadl8c84cba0/CO- 

Egg-Farm-Fire/ 

28. May 12, Food Safety News - (Washington; International) FDA halts shellfish imports 
from Korea. The Food and Drug Administration (FDA) stopped the shipment of fresh 
and frozen oysters, clams, mussels, and scallops from Korea to the United States 
because many of these molluscan shellfish may be contaminated, according to a news 
release from the Washington State Department of Health. The action comes with 
removal of all certified dealers in the Korean Shellfish Sanitation Program from the 
FDA’s Interstate Certified Shellfish Shippers Fist, the health department stated, 
according to a May 12 report from Food Safety News. As a result, the Washington 
State Department of Health is advising consumers not to eat any fresh or frozen 
shellfish from Korea and is working with distributors and local health agencies to recall 
such products. 

Source: http://www.foodsafetynews.com/2012/05/fda-halts-shellfish-imports-from- 
korea/ 

29. May 11, U.S. Food and Drug Administration - (California) Whole Foods Market 
recalls carrot cake cupcakes for undeclared walnuts in northern California. Whole 
Foods Market recalled its variety cupcake six-packs sold in stores in northern 
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California because some of the products contain undeclared walnuts, the U.S. Food and 
Drug Administration reported May 1 1 . One illness was reported. Whole Foods Market 
cupcake six-packs sold in northern California included several flavors of cupcake, 
including chocolate, red velvet, and vanilla in addition to carrot cake. Only the carrot 
cake cupcakes contain walnuts. The recalled cupcakes were sold at stores in Folsom, 
Lafayette, Los Altos, Mill Valley, Novato, Palo Alto, San Francisco, San Jose, Santa 
Rosa, and Sonoma. 

Source: http://www.fda.gov/Safety/Recalls/ucm303932.htm 

30. May 10, U.S. Food and Drug Administration - (Puerto Rico) Jonlly Fruits Inc. issues 
allergy alert on undeclared allergens in several products. Jonlly Fruits Inc. of 
Bayamon, Puerto Rico, alerted consumers about their brands Jonlly Fruit and Natural 
Tropic because they may contain undeclared sodium caseinate (a milk derivative), the 
U.S. Food and Drug Administration (FDA) reported May 10. Jonlly Fruits and Natural 
Tropic brand beverages were distributed through supermarkets, bakeries, and retails 
stores throughout Puerto Rico. The recall was initiated after it was discovered during an 
FDA inspection that products were distributed in packaging that did not reveal the 
presence of the milk derivative ingredient. The formulation was adjusted to eliminate 
the use of the ingredient, and provisional labels declaring the allergens were prepared 
to re-label products already available for distribution. 

Source: http://www.fda.gov/Safety/Recalls/ucm303832.htm 

For more stories, see items 56 and 58 
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Water Sector 



31. May 14, Associated Press - (Virginia) State, Federal governments allocate $1.69M 
to clean up damage from acid mine drainage. The State and federal governments are 
allocating $1.69 million to clean up damage caused by acid mine drainage from 
abandoned coal mines in southwest Virginia, the Associated Press reported May 14. 
Virginia’s governor calls the funding the last piece of the puzzle in a project restoring 
water quality in the Powell Valley watershed, which is home to many endangered or 
threatened aquatic species. The effort includes erosion control and stream bank 
stabilization needed because of damage caused by acid mine drainage. The governor 
said State and Federal funds administered through the Virginia Department of Mines 
Minerals and Energy were being used to match State Water Quality Improvement Act 
and federal Clean Water Act funds. 

Source: 

http://www.therepublic.com/view/storv/ac860cc83ff24b5f9fe5805e58db7fb6/VA- 

Environmental-Project/ 

32. May 13, Associated Press - (North Dakota) Homes threatened by rising water at 
Rice Lake. Water has been rising at Rice Lake, a popular getaway a few miles 
southwest of Minot, North Dakota, leaving residents worried about how their lakeside 
homes will make it through the summer. Rice Lake sits above the Douglas Aquifer. 
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The water level began rising more than a year ago after three consecutive winters of 
heavy snows. With no natural outlet to disperse heavy rainfall, the lake rose 8 inches in 
an 8-day period earlier in May, and it is currently rising about three-quarters of an inch 
a day, a resident said. A recent break in a portion of the Rice Lake sewer system is 
believed to have been caused by too much pressure from underground water. Rice Lake 
residents began a pumping program in the summer of 201 1 that lowered the lake level, 
but it appears to have provided just a few months respite from the continual rise. A 
permanent solution being sought is a proposed $6 million pipeline leading south from 
Rice Lake into Douglas Creek. 

Source: http://bismarcktribune.com/news/state-and-regional/homes-threatened-bv- 
rising-water-at-rice-lake/article d684d096-9cb8-llel-b4bd-0019bb2963f4.html 

33. May 13, Associated Press - (Alabama) Alabama sewage problems threaten areas 
downstream from Uniontown. Two spills from the Uniontown, Alabama, sewage 
treatment facility were repaired, but regulators said they still pose a danger to people 
downstream, the Associated Press reported May 13. The Alabama Department of 
Environmental Management warns it could be a few weeks to a few months before the 
sewage in the water is washed downstream. State records show there have been 
numerous leaks from the Perry County town’s sewage plant since 2005. 

Source: 

http://www.therepublic.com/view/storv/f73cf754ba9643dea5f867ea89b3d7f8/AF— 

Alabama-Sewage-Spill/ 

34. May 11, KSNW 3 Wichita - (Kansas) Mussel invasion choking off water to Council 
Grove. An invasion of zebra mussels has cut off the intake lines to the water tower in 
Council Grove, Kansas, and city leaders asked residents to cut back on their use of 
water May 11. “Throughout the complete inside of the water tower, on the valves, the 
stems that operate the valves, there are platforms about an inch and a half thick and I 
mean solid,” said the city administrator. Normally the intake line from the city lake can 
pump 775 gallons per minute of water into the treatment plant. The flow has been cut to 
less than 200 gallons per minute. Pumps borrowed from the fire department were being 
used to pump in water from the Neosho River. In spite of an intensive education 
campaign, zebra mussels were first spotted in the city lake in 2011. Officials believe 
the mild winter helped spur rapid reproduction of the invasive species. The city plans to 
use older lines to feed water to the tower until the intake from the lake is cleared. 
Source: http://www.ksn.com/news/local/story/Mussel-invasion-choking-off-water-to- 
Council-Grove/HSKOHhY8bk-8f-aFN8vZtw.cspx 

For another story, see item 52 
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Public Health and Healthcare Sector 



35. May 14, Associated Press - (North Carolina) Flood forces Harnett County Health 
Department to work in tents for 2 weeks. Employees with the Harnett County, North 
Carolina Health Department were about to end their time working from tents, which 
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were set up after a pipe ruptured and flooded the first floor of their permanent building. 
The tents were scheduled to be broken down and packed May 14. Officials were still 
calculating damage from the April 28 flood. Within a few days, the building’s rear 
parking lot became a temporary health center. The department was closed for 2 days, 
when workers moved patient records into a nearby building. Renovations may not be 
complete until August. 

Source: 

http://www.therepublic.com/view/story/65a8b6ad8598465e97f9f577583080el/NC~ 

Health-Department-Tents/ 

36. May 11, Federal Bureau of Investigation - (Florida) Mayo Clinic radiology tech 
pleads guilty to spreading hepatitis C. A U.S. attorney announced May 11a 
Jacksonville, Florida man pleaded guilty to one count of tampering with a consumer 
product resulting in death, four counts of tampering with a consumer product resulting 
in serious bodily injury, and five counts of stealing Fentanyl by deception. According 
to court documents, he worked as a radiology technician at the Mayo Clinic in 
Jacksonville from October 2004 through August 2010. He admitted that he stole 
syringes of Fentanyl during patients’ procedures and replaced them with syringes of 
saline contaminated with hepatitis C. His tampering occurred from 2006 through 2008 
at the Mayo Clinic’s intervetonal radiology unit. 

Source: http ://w w w .fbi . go v/i acksonville/pres s-releases/20 1 2/mayo-clinic-radiolog y- 
tech-pleads-guilty-to-spreading-hepatitis-c 

For another story, see item 4 



T Return to top i 



Government Facilities Sector 

37. May 14, Softpedia - (National) UGNazi hackers leak data from Washington 
Military Department. UGNazi hackers breached the site of the Washington Military 
Department and leaked data from the Web site’s databases. The hackers leaked name 
servers, MX records, and the names and IP addresses of the subdomains used by the 
State of Washington. They also leaked around 16 user account details, consisting of 
usernames and password hashes, including the ones of the site’s administrator. “This is 
just a continuation of our attack against wa.gov, but other than that, like we said we’re 
not done with the government or anyone to be exact,” a hacker told Softpedia. 

Source: http://news.softpedia.com/news/UGNazi-Hackers-Leak-Data-from- 
Washington-Military-Department-269244.shtml 

38. May 12, Associated Press - (Oregon) Fire damages Oregon high school. Three 
Oregon high school students, accused of setting a fire that destroyed part of Woodbum 
High School in Woodbum, May 11, were arrested, police said. The three were arrested 
for investigation of first-degree arson, reckless burning, and reckless endangering, a 
police sergeant said. Students and staff members evacuated the 1,400-student high 
school May 1 1 as fire crews responded. As many as 60 firefighters from a dozen 
agencies fought the blaze, a Woodbum Fire District official said. 
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Source: http://www.registerguard.com/web/newslocalnews/28058612-41/fire-students- 
woodbum-friday-police.html.csp 

39. May 11, WRTV 6 Indianapolis - (Indiana) Students sent home early after chemical 
leak. Lebanon, Indiana High School students were sent home early May 1 1 after a 
chemical leak forced an evacuation at the school. Science students spilled cyclohexene, 
a volatile, highly flammable liquid, a Lebanon police lieutenant said. “While 
attempting to clean up the spill, some of the liquid was poured into the drain,” he said. 
Students and staff were evacuated to the football field. The leak was contained a short 
time later, but school officials decided to send students home early. 

Source: http://www.theindvchannel.com/news/31049442/detail.html 

40. May 11, WDEL 1150 Wilmington - (Delaware) Troopers investigate bomb threats at 
2 high schools. Delaware State police were investigating bomb threats May 1 1 at two 
schools in Camden and Woodside. Students at Caesar Rodney High School in Camden 
were sent home for the day after a threat was emailed to the school’s Web site in the 
morning. K-9 units were called in, and no explosives were found. Just before noon, a 
bomb threat was phoned into the Polytech High School in Woodside. Bomb sniffing 
dogs were also called in in that incident, and police said nothing was found. 

Source: http://www.wdel.com/storv.php?id=42779 

41. May 11, Associated Press - (California) Plane intrudes on Air Force One 
airspace. Two F-16 fighter jets intercepted a small private plane that violated restricted 
airspace May 1 1 as the U.S. President was about to depart from Los Angeles 
International Airport aboard Air Force One, authorities said. North American 
Aerospace Defense Command (NORAD) scrambled the two jets that intercepted the 
Piper 28 aircraft over northeast Los Angeles and followed it until it landed about 5 
minutes later and was met by local law enforcement, NORAD said in a statement. The 
Piper landed at the small airport in El Monte, local police said. After questioning the 
man and searching the plane, the Secret Service allowed him to refuel and leave the 
airport, police said. 

Source: http://www.armytimes.com/news/2012/05/ap-air-force-one-plane-intrudes- 
airspace-051112/ 

42. May 11, Anchorage Dcdly News - (Alaska) Officials investigate white powder sent to 
school district. White powder in an envelope sent May 10 to a school district building 
in King Salmon, Alaska, was under investigation by a postal inspector and the Alaska 
National Guard, the Guard said. The Lake and Peninsula School District’s headquarters 
was evacuated after a clerk opened a letter and the powder spilled out. The FBI asked 
for help from the Guard’s 103rd Civil Support Team, which sent four team members 
with a U.S. postal inspector to the Alaska Peninsula community, the Guard said. The 
team planned to use radiation and chemical detection to screen samples of the powder 
to see if it was dangerous. The powder was to be turned over to law enforcement as 
evidence. 

Source: http://www.adn.com/2012/05/ll/2461752/officials-investigate-white- 
powder.html 
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43. May 11, Rock Hill Herald - (South Carolina) Database of York County job 
applicants, vendors hacked. York County, South Carolina, officials detected an 
intrusion into a Web server containing personal information on thousands of job 
applicants and vendors, they announced May 11. County officials discovered the 
intrusion during routine maintenance in August 2011, said the director for York 
County’s information technology department. The server contained an old backup 
database of an old online application, “and that’s where the majority of (the names) 
were,” he said. “The database could be 12 to 15 years old” and contained about 12,500 
names. Forensic testing showed the vulnerability was in an application on the county’s 
Web site. He said the county has been working to “tighten up” the Web site’s security. 
Source: http ://www .heraldonline . com/20 1 2/05/1 1/3966511 /york-co- go vernment-finds- 
security.html 



For another story, see item 10 
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Emergency Services Sector 

44. May 11, Pinole Patch - (California) Fire station brownouts starting 
immediately. The Rodeo-Hercules Fire District Board in California decided to begin 
station brownouts immediately in Hercules and Rodeo instead of using reserve funds to 
continue to staff both stations. “Our available staffing is down to 10 personnel with one 
on long term disability,” said the district chief. “Full staffing is 18 firefighters and we 
can’t sustain both fire stations with those numbers.” He said the closures would happen 
on a rotating basis between Rodeo and Hercules. “The temporary closures will last until 
we have an increase in our revenues or we receive relief from another source such as a 
federal grant,” he said. In the winter, the chief said the city of Pinole was considering 
contracting with Rodeo-Hercules. If the contract was a go, Rodeo-Hercules would be 
able to keep both of its stations open full-time, he said. In an e-mail May 8, the chief 
said Pinole was still considering Rodeo-Hercules’ bid to contract with the district. 
Source: http://pinole.patch.com/articles/fire-station-brownouts-starting-immediately 

45. May 10, Fox News - (West Virginia) 1,000 officers stop mock prison riot in West 
Virginia. To stop a prison riot, rescue hostages, and prevent an ambush, nearly 1,000 
law enforcement and corrections officers from around the world convened in West 
Virginia the week of May 7. The 3-day Mock Prison Riot, a tactical scenario training 
event showcasing non-lethal technology, ended May 9 in the decommissioned West 
Virginia Penitentiary at Moundsville. Between 1876 and 1995, the prison was the site 
of many escapes and riots, including a 2-day riot in 1986 where 20 inmates stormed the 
mess hall and took 15 corrections officers hostage, ultimately leaving 3 inmates dead. 
The event gives law enforcement and corrections officers the chance to train under 
realistic conditions with the newest, cutting-edge less than lethal technologies. Some 27 
teams tackled 58 tactical scenarios and had the chance to test technology from more 
than 40 companies. Participants represented local, county, State, and federal officers, 
from U.S. SWAT forces to the highly trained elite Singapore Prisons Emergency 
Action Response team, who specialize in close quarters riot control, transportation of 
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high-risk inmates, and dynamic entry. After 16 years, federal support was yanked for 
the training program that officers often paid to attend. The West Virginia Department 
of Corrections stepped in and sponsored in 2012. 

Source: http://www.foxnews.com/scitech/2012/05/10/1000-officers-stop-mock-prison- 
riot-in- west- Virginia/ 
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Information Technology Sector 

46. May 14, Help Net Security - (International) Fuzz-o-Matic finds critical flaw in 
OpenSSL. Codenomicon helped identify a critical flaw in widely used encryption 
software. A flaw in the OpenSSL handling of CBC mode ciphersuites in TLS 1.1, 1.2, 
and DTLS can be exploited in a denial-of- service attack on both client and server 
software. The flaw was found with Fuzz-o-Matic, a cloud-based testing platform. The 
TLS security protocol is the current Internet standard for encrypting and authenticating 
application traffic. TLS is used by millions of people every day in online banking, e- 
commerce, e-mail, and Voice-over-IP applications. The OpenSSL is an open-source 
implementation of TLS and is employed in standard operating systems, Web browsers, 
e-mail clients, and network devices ranging from WiFi access points and DSL modems 
to industrial- strength core routers. 

Source: http://www.net-securitv.org/secworld.php?id=12916&utm 

47. May 14, H Security - (International) Notepad++ web site compromised. Unknown 
attackers breached the Web site of the popular open source text editor Notepad++ and 
tried to trick visitors to the site into handing over the credentials to their Facebook 
accounts. It is currently believed the software downloads were not affected, later, the 
rest of the Web site appeared to be fixed. When accessed at the end of the week of May 
7, the Web site of the project showed defacements by the attackers and also a second 
window appeared asking for a Facebook login. It appears the hackers were using the 
official Facebook API in an attempt to gain access to account credentials from visitors 
to the site. Users who actually entered their Facebook credentials could potentially have 
provided the attackers with persistant access to all functions on their account such as 
personal information and the ability to post status messages. In this case, users would 
have to visit their Facebook account settings to revoke these permissions. Simply 
changing the account password is not sufficient. 

Source: http://www.h-online.com/security/news/itern/Notepad-web-site-compromised- 
1575263.html 



48. May 14, Softpedia - (International) Avast warns about “Fakelnst” and alternative 
Android markets. The large number of malicious Web sites designed to infect 
Android devices with the Android: Fakelnst SMS trojan made Avast security experts 
issue another warning to alert users. They advise smartphone owners to beware of fake- 
looking alternative Android application markets. Researchers found several domains, 
such as t2file(dot)net and uote(dot)net, which store at least 25 new apps that mask the 
piece of malware. After users are lured onto these Web sites, they are presented with a 
phony Downloader program. This app tells the victim the operation may cost money, 
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but the Quit button does not work. Once the installation process begins, there is nothing 
a user can do except click on the Agree or OK buttons. Once one of these options is 
selected, an SMS to a premium rate number is sent out. The trojan contains premium 
numbers for about 60 different countries worldwide. In order to prevent experts from 
analyzing the malware, its creators used AES encryption to make the file inaccessible. 
Source: http://news.softpedia.com/news/Avast-Wams-About-FakeInst-and-Altemative- 
Android-Markets-269380.shtml 



49. May 14, Softpedia - (International) Fake Android antivirus served via Twitter 
spam. Security researchers warn that Twitter is being flooded with shady-looking posts 
that contain links to Web sites hosted on .tk domains. These sites hide malicious 
elements that target not only PC users, but also Android owners. GFI Fabs experts 
report that while PC users are served broken .jar files, Android customers are tricked 
into installing a fake antivirus application whose icon replicates a product provided by 
Kaspersky. First, the cybercriminals post tweets in Russian or English that advertise all 
sorts of materials, mainly adult content. All the tweets contain a link to a site such as 
good-graft(dot)tk. Once clicked, the links open a Russian site designed for smartphone 
and computer owners. Depending on the device from which the Web site is accessed, 
the victim is served a file called VirusScanner.jar (for PC), or VirusScanner.apk (for 
Android). Experts revealed the .jar file appears to be broken, since an error is displayed 
when it is executed. However, this may change at any time, so users should be cautious 
when presented with such an element. VirusScanner.apk is a rogue antivirus application 
that displays the Kaspersky logo when it is installed. Identified as 
Trojan.Android. Generic. a by GFI’s VIPRE Mobile Security, the piece of malware 
reveals its true purpose during the installation process when it asks permission to access 
phone calls, messages, and services that cost money. 

Source: http://news.softpedia.com/news/Fake-Android-Antivirus-Served-Via-Twitter- 
Spam-269361.shtml 

50. May 14, H Security - (International) Skype for Linux hotfix plugs security 
hole. Skype issued a hotfix release for its closed source VoIP, video, and text chat 
software for Finux, nearly 1 year after the last update arrived. The new version of 
Skype for Finux, labelled 2.2.0.99, is a minor update that includes an upgraded version 
of the libpng PNG reference library, which closes a security hole. While specific details 
are not provided by Skype, this is likely to be the same integer overflow vulnerability 
that prompted Mozilla to release unscheduled updates for the Firefox Web browser and 
the Thunderbird news and e-mail client earlier in 2012. According to its developers, the 
security problem only affects the static package of Skype for Finux downloaded 
directly from the company; other versions such as those supplied by the Ubuntu 
Software Centre are not affected by the issue. 

Source: http://www.h-onhne.com/security/news/item/Skype-for-Finux-hotfix-plugs- 
security-hole- 1 575232.html 



51. May 12, CNET - (International) Adobe will issue free security fixes for CS5 apps 
after all. Adobe reversed its policy that required customers to pay to acquire recent 
security patches for its Photoshop, Illustrator, and Flash Professional products. The 
patches cover vulnerabilities that could let a remote user execute malicious code and 



- 18 - 



take control of computers running the products. Adobe originally said customers would 
need to pay to upgrade to the CS6 versions of the products to receive the fix. 

Source: http://news.cnet.com/8301-1009 3-5743323 1-83/adobe-will-issue-free- 
security-fixes-for-cs5-apps-after-all/ 

52. May 11, Threatpost - (International) CERT warns on critical hole in SCADA 

software by Italian firm Progea. The DHS issued a bulletin May 10 warning about a 
previously undisclosed, critical vulnerability in Movicon 11, a product used to manage 
critical infrastructure including the manufacturing, energy, and water sectors. The 
Industrial Control Systems Cyber Emergency Response Team posted an advisory that 
warned customers of Progea Sri that a memory corruption vulnerability in the Movicon 
Human Machine Interface software could allow a remote attacker to knock Movicon 
devices offline using a specially crafted HTTP POST request sent to the Movicon OPC 
server component. Progea issued a fix for the problem. 

Source: http://threatpost.com/en us/blogs/cert-wams-critical-hole-scada-software- 
italian-firm-progea-05 1112 

For more stories, see items 7, 13, 37, and 43 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at sos@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 



53. May 16, WAVE 3 Louisvillke - (Indiana) Cut fiber optic line disrupts phone service 
in 3 Indiana counties. A cut fiber optic line in Salem, Indiana, was causing phone 
outages across parts of at least three Indiana counties May 14, according to the 
Lawrence County Sheriff’s Department. Landline service and Verizon and AT&T cell 
phone service was out in some areas of Washington, Lawrence, and Orange Counties. 
9-1-1 calls were being rerouted to Crawford County dispatchers. As of May 14, there 
was no word on how the fiber optic line was cut and crews were uncertain when it 
would be repaired. 

Source: http://www.wave3.com/story/18375145/cut-fiber-optic-line-disrupts-phone- 
service-in-3-indiana-counties 



54. May 12, KSFN 30 Fresno - (California) Copper wire theft suspect arrested at 
recycling center. Fresno County, California sheriffs detectives arrested a man they 
believe is responsible for stealing miles of phone wire, KFSN 30 Fresno reported May 
12. The theft cut off home phone service to AT&T customers and left the company 
with thousands of dollars in losses. Investigators believe the 220-pound load was stolen 
May 6-7. A sergeant said the suspect brought his first load into the recycling center 
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yard May 10. Since the utility wire looked suspicious, employees called the Fresno 
County Sheriffs Office. May 11, after deputies arrived to check it out, the suspect 
showed up. “While they were in the process of identifying the wire, the same suspect 
returned for a third time and was contacted with an additional lot of the wire and was 
subsequently arrested,” the sergeant said. Since the beginning of 2012, AT&T has 
reported 13 telecommunications wire thefts in the Fresno County area. AT&T officials 
reported the local losses at more than $200,000. 

Source: http://abclocal.go.com/kfsn/storv?section=news/local&id=8658527 
For more stories, see items 46, 48, 49, and 50 
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Commercial Facilities Sector 



55. May 14, WCMH 4 Columbus - (Ohio) 1 killed in 3-alarm blaze at apartment 

complex. One person died, 40 people were rescued, and 3 went to hospitals after a 3- 
alarm fire at an apartment complex in the North Linden area of Columbus, Ohio, May 
13. The fire broke out at the Cambridge Apartments. According to the Columbus 
Division of Fire (CDF), 14 people stayed at the Red Cross’ emergency shelter 
overnight. Arson investigators continued to investigate May 14. 

Source: http://www2.nbc4i.com/news/2012/may/13/22/crews-battle-3-alarm-blaze- 
apartment-complex-ar- 1035221/ 

56. May 14, Melville Newsday - (New York) Chuang Yen Monastery illnesses might be 
linked to rice balls. Law enforcement and health investigators were trying to trace the 
source of a food-bome outbreak that sickened dozens of people who attended a 
Mother’s Day garden party and food fair at a Buddhist monastery in Carmel, New 
York, May 13. Sticky rice balls were suspected as a possible culprit, a Town of Kent 
police detective said May 14. About 700 people, most of them arriving on tour buses 
from New York City, came to the annual event where dishes were prepared by 
volunteers, a spokeswoman for the Chuang Yen Monastery said. An official with the 
Putnam County Bureau of Emergency Services said about 150 people overall became 
sick and about 80 of those had boarded buses to go shopping at an outlet. The detective 
said his department confirmed fewer than 30 sick, but he said the number could go as 
high as 150 or more. The Chuang Yen Monastery will be working with health officials 
on the investigation, the spokeswoman said. Though an estimated 100 people went to 
hospitals in 3 counties, there were no reports of patients who remained overnight. 
Source: http://newvork.newsday.com/news/health/chuang-ven-monasterv-illnesses- 
might-be-linked-to-rice-balls- 1.37 16379 

57. May 13, WRC 4 Washington, D.C. - (Maryland) Fire at Pr. George’s car 
dealership. Firefighters battled a three-alarm fire for nearly 2 hours May 13 at a car 
dealership in the Marlow Heights section of Prince George’s County, Maryland. Fire 
broke out at the Koons Pontiac Buick GMC dealership. Officials said a mobile home or 
trailer caught fire in a warehouse on the dealership’s property. Responding firefighters 
found heavy smoke and fire, which prompted the second and third alarms. At one point, 
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firefighters had to be evacuated from the building due to the dangerous sagging of the 
roof. 

Source: http://www.nbcwashington.com/news/local/Fire-At-Pr-Georges-Car- 
Dealership- 151 296625 .html 

58. May 13, KOLN 10 Lincoln - (Nebraska) Fire damage expected to destroy all food in 
Lincoln market. A market in Lincoln, Nebraska, may lose all food inventory following 
a May 12 fire. According to a battalion chief, multiple people called 9-1-1 to report 
smoke coming from the Flong Kong Market. He said crews found moderate smoke 
coming from the roof and some flames inside. When crews tried to get to the fire, they 
had difficulty maneuvering through the narrow aisles of the market. According to the 
chief, because of the safety concern, crews fought the fire from outside. Health 
department staff were at the fire scene and evaluated the scene because of concerns 
with the foods inside. 

Source: 

http://www.1011now.com/home/headlines/Fire Damage Expected to Destroy All F 
ood in Lincoln Market 151287475.html 



59. May 13, Knoxville News Sentinel - (Tennessee) Dozens displaced after blaze at West 
Knoxville apartment complex. Thirty-five residents were forced out by a fire that 
heavily damaged their west Knoxville, Tennessee apartment building May 13. 
Firefighters arrived to find flames on the second- and third-floor balconies of the 24- 
unit building, with fire spreading into the attic, a Knoxville Fire Department captain 
said. Fire crews focused their attacks on the balcony and attic areas as other firefighters 
searched each unit for possible victims. About half of the building’s units suffered 
heavy fire damage, while the remainder received mostly smoke and water damage. 
Additionally, “[a] partial collapse of the third floor during the fire occurred due to a 
combination of lightweight construction, fire damage, and excessive weight of water 
being used to extinguish the flames,” the captain said. The fire was brought under 
control within about 3 hours, during which the work was complicated by a bit of bad 
timing — firefighters had to direct traffic across hose ramps, the captain said. 

Source: http://www.knoxnews.com/news/2012/may/13/fire-damages-24-units-west- 
knoxville-apartment-com/?partner=RSS 

60. May 12, Bellingham Herald - (California) Fire destroys 7 downtown businesses in 
historic Mariposa, Calif. Seven businesses in downtown Mariposa, California, burned 
to the ground the weekend of May 12. The fire caused an estimated $1 million in 
structural damage. “This is probably the most devastating fire they’ve had in Mariposa 
in over 30 years,” the CalFire battalion chief said. A pizza parlor was packed May 1 1 
when the fire began. By May 12, nothing was left of the pizza parlor or the adjacent 
businesses. California Highway 140 was detoured around the fire May 11, and that 
stretch of highway was not reopened until May 12. About 75 firefighters from 
Mariposa, Madera, and Merced counties and CalFire teamed to stop the flames from 
spreading to the nearby Mariposa Christian Fellowship Church or elsewhere. All of the 
destroyed businesses were in an approximately 9,000-square-foot building. The one- 
and two-story building had a full basement and attic, making the fire tough to 
extinguish. 
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Source: http://www.bellinghamherald.com/2012/05/12/2519769/fire-destroys-7- 
downtown-businesses.html 
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National Monuments and Icons Sector 



61. May 14, Associated Press - (Arizona) Northern AZ wildfire grows, prompts 
evacuations. Firefighters battled a growing wildfire May 14 in northern Arizona that 
forced residents from their homes in a historic mining town. The fire in Crown King 
began on private land May 13 and grew to more than 4.5 square miles, destroying two 
buildings and one trailer, said a Prescott National Forest spokeswoman. The fire started 
at a “structure” and was human-caused, she said. The area remained under a mandatory 
evacuation order, though a Yavapai County sheriff’s spokesman said in a news release 
that most of the town’s 350 residents chose to stay in the community of mostly summer 
homes. The American Red Cross reported five evacuees at a shelter in Mayer. Five 
wildfires in the State charred more than 9 square miles by late May 13. Billowing 
smoke from the fire and another one to the west near Crown King could be seen in 
Phoenix, more than 50 miles south. The fire overtook part of Crown King Road, 
making the road to the town inaccessible, a sheriff’s office statement said. The State’s 
other large fire, in an area 120 miles east of Phoenix, was spotted in Tonto National 
Forest, where it burned about 4 square miles. That blaze was about 20 miles south of 
Payson, a gateway town to mountains popular among Arizona campers. The fire was 
moving northeast toward a wilderness area, a Tonto National Forest spokesman said. 
Crews were also at a blaze believed to be sparked by lightning on the Fort Apache 
Indian Reservation in eastern Arizona, which charred more than 480 acres. 

Source: http://www.foxnews.com/us/2012/05/14/arizona-wildfires-keeping-crews- 
busy/ 

62. May 14, Myrtle Beach Sun News - (South Carolina) SC man accused of causing 
massive Myrtle Beach wildfire. The Legends II fire was fully contained and held to 
178 acres after it threatened to get out of control the weekend of May 12. South 
Carolina Forestry Commission crews wrapped up their cleanup efforts May 13, though 
some crew members from the State agency and Horry County Fire Rescue were to 
continue to monitor the fire breaks, according to a Forestry Commission spokesman. 
The commission warned the burned area remained hazardous and should be avoided. 
The State agency cited a man for starting a fire without taking the proper precautions 
and negligently allowing the fire to spread. The fire scorched lands between U.S. 501 
and S.C. 544 and north of S.C. 31. About 50 homes in the Myrtle Trace South and 
Castlewood neighborhoods were evacuated. Two Fair Bluff, North Carolina firefighters 
were in the hospital after their tanker truck blew a tire and flipped on U.S. 501, shutting 
down multiple lanes of traffic. The firefighters were transported to an area hospital with 
severe injuries. 

Source: http://www.heraldonline.com/2012/05/14/397Q217/sc-man-accused-of- 
causing-massive.html 
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Dams Sector 

63. May 13, Associated Press - (Ohio) New methods gauge levee leakage. Work began 
on a new method to measure leakage at a deteriorating levee, as federal officials try to 
come up with a permanent solution to the problem threatening the historic eastern Ohio 
village of Zoar, the Associated Press reported May 13. The 75-year-old levee 
administered by the U.S. Army Corps of Engineers protects the village. Flood waters 
over the years have led to water seepage under the earthen structure, stretching 4,000 
feet along the edges of the Tuscarawas County community. The Corps, which classified 
the levee as in need of urgent repairs, was working on a study to find a permanent 
solution. It also was taking interim steps to monitor seepage and reduce flood risk. 
Construction on the new measuring tool began the week of May 7 and is to be 
completed no later than September. It involves building a ditch and a weir at the base of 
a gravel berm near the pump station. Any water seeping through the berm would go 
into the ditch and be channeled into the weir, which is an instrument measuring water 
volume during flooding. Other steps have included relieving groundwater pressure 
underneath the levee, collecting seepage, and establishing a pumping station to collect 
natural drainage and seepage and pump it to the other side of the levee. 

Source: http ://www .marionstar.com/article/20 1 205 1 3/NEWSO 1 /205 130320 

64. May 12, Easton Express-Times - (New Jersey) Bloomsbury Dam to be demolished 
by Army Corps of Engineers. The U.S. Army Corps of Engineers plans to knock out 
most of the Bloomsbury Dam, the Easton Express-Times reported May 12. The Corps 
said the 170-foot-wide, 7-foot-tall dam on New Jersey’s Musconetcong River is 
obsolete and bad for fish and plants. The plan is to remove all but 70 feet of the dam, 
which is on the border of Bloomsbury and Greenwich Township in New Jersey. The 
earliest the partial removal would start is the end of 2013, the project manager for the 
Corps said. The dam used to be a power source for a mill, but now only interferes with 
aquatic life, he said. 

Source: http://www.lehighvalleylive.com/hunterdon-county/express- 
times/index.ssf/2012/05/bloomsbury dam to be demolishe.html 

65. May 11, Boise Idaho Statesman - (Idaho) Corps of Engineers cuts back water 
releases from Lucky Peak, but Boise River still above flood stage. Water managers 
reduced the outflows from Lucky Peak Dam in Ada County, Idaho, by about 200 cubic 
feet per second (cfs) May 11, and they were planning to cut back another 250 cfs May 
15, said a news release from the U.S. Army Corps of Engineers. However, the Boise 
River was still running very high and fast — above flood stage — and the public was 
urged not to go in or near the water. The river was running at 7,610 cfs May 11 at the 
Glenwood Bridge gauge, according to U.S. Geological Survey data. Flood stage is 
7,000 cfs. The river level is at 10.5 to 10.6 feet, down from a high of 10.9 feet May 5. 
Source: http://www.idahostatesman.com/2012/05/ll/2112275/ada-county-city- 
officials-get.html 
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